Privacy Policy

Thank you for your application! Please note that your personal data will be processed by Group-IB in accordance with our Candidate Privacy Notice below.
This privacy notice explains how Group-IB (“we”, “us”, or “our”) collects, uses, stores, and otherwise processes your personal data during the recruitment process, in accordance with applicable data protection laws globally.

Depending on the role you are applying for, the specific data controller responsible for your personal data will be the group entity publishing the position:

• If you apply for a position published by GROUP-IB EUROPE B.V., your data will be processed by Group-IB Europe B.V. (Registration number: 78559863; Address: Prinsengracht 919, 1017KD Amsterdam, Netherlands);
• If you apply for a position published by GROUP-IB GLOBAL PRIVATE LIMITED, your data will be processed by Group-IB Global Private Limited (UEN: 201904606N; Address: 108 Robinson Road, #07-01, Singapore 068900);
• If you apply for a position published by GROUP-IB HOLDING LIMITED, your data will be processed by Group-IB Holding Limited (Registration number: 36609; Address: Unit. L1-B-044, Level 1, Reem Mall, Najmat Abu Dhabi, Abu Dhabi, Al Reem Island, United Arab Emirates);
• If you apply for a position published by GROUP-IB MEA FZ-LLC, your data will be processed by Group-IB MEA FZ-LLC (Licence number: 98450; Address: Dubai, Dubai Internet City, Building @3, Office 102, United Arab Emirates);
• If you apply for a position published by GROUP-IВ CONSULTORÍA LATAM LIMITADA, your data will be processed by Group-IВ Consultoría Latam Limitada (RUT number: 77.909.039-6; Address: Edificio el Patio, Avenida Providencia 1650 OF 1502 15P, Providencia, Santiago, Chile);
• If you apply for a position published by GROUP IB MANAGEMENT REGIONAL HEAD QUARTER, your data will be processed by Group IB Management Regional Head Quarter (Commercial registration number: 1009139513; Address: Building No. 5176, Saud Ibn Abdulaziz Ibn Muhammed Branch Street, Secondary No. 6764, Al Nakheel Dist., Riyadh, Postal Code 12381, Kingdom of Saudi Arabia);
• If you apply for a position published by LLC GROUP-IB TSHK, your data will be processed by LLC Group-IB Tshk (TIN/ИНН: 310116553, Registration number: 2047225; Address: 1A Abdulla Qodiriy Street, Yunusabad District, Tashkent, Uzbekistan);
• If you apply for a position published by GROUP-IB SEA CO. LTD, your data will be processed by Group-IB SEA Co. Ltd (Registration number: 0835566026713; Address: 77/77, Moo 5, Ratsada Sub-district, Muang Phuket District, Phuket province, 83000, Thailand).

For any privacy queries, you can contact our Data Protection Officer at: [email protected].

We process a variety of personal data that you provide or that we obtain during the recruitment process. These may include:

• Identification data: name, email address, telephone number, ID;
• Curriculum vitae (CV) data: work experience, education, qualifications, and other resume details;
• Interview data: recordings or transcripts of your responses in pre-recorded (Hireflix) or live (Google Meet) interviews;
• Communication data: emails and other messages between you and our recruitment team;
• Assessment data: notes and evaluations made during interviews or testing;
• Security check questionnaire responses: provided during pre-employment screening (where applicable and legally permissible under national laws);
• Any other information: voluntarily submitted by you during the process.

We collect personal data from the following sources:

• Directly from you, including during the application, interview, and communication stages;
• Publicly available professional profiles (e.g., LinkedIn);
• Recruitment agencies and platforms you use to apply;
• Individuals you provide as references;
• Background check providers, subject to strict regional legal requirements;
• Results of any assessments or questionnaires;
• Polygraph testing results, where explicitly authorized or legally permitted by national Member State laws (not applicable within the European Economic Area).

We process your personal data for the following purposes under applicable regional data protection laws:

• To evaluate your candidacy for the position
  [Bases: Pre-contractual necessity (EU GDPR, UAE PDPL, KSA PDPL, Thailand PDPA, ADGM DPR, Uzbekistan Law, Chile Law); Deemed Consent / Evaluative Purpose Exception (Singapore PDPA)]
• To communicate with you during the process
  [Bases: Pre-contractual necessity (EU GDPR, UAE PDPL, KSA PDPL, Thailand PDPA, ADGM DPR, Uzbekistan Law, Chile Law); Deemed Consent (Singapore PDPA)]
• To conduct interviews using digital tools like Hireflix and Google Meet
  [Bases: Legitimate interest in efficient hiring (EU GDPR, Thailand PDPA, ADGM DPR); Consent or Contract Performance / Implied Consent (Singapore PDPA, UAE PDPL, KSA PDPL, Uzbekistan Law, Chile Law)]
• To store and manage candidate data in our HR system, HiBob
  [Bases: Legitimate interest in centralized HR administration (EU GDPR, Thailand PDPA, ADGM DPR); Consent or Performance of a Contract (Singapore PDPA, UAE PDPL, KSA PDPL, Uzbekistan Law, Chile Law)]
• To retain data for legal defense or internal recruitment optimization
  [Bases: Legitimate Interest (EU GDPR, Thailand PDPA, ADGM DPR); Consent, Statutory Exceptions, or Business Purpose Protection (Singapore PDPA, UAE PDPL, KSA PDPL, Uzbekistan Law, Chile Law)]
• Future talent nurturing
  [Bases: Explicit Consent across all jurisdictions (EU GDPR, Singapore PDPA, Thailand PDPA, UAE PDPL, KSA PDPL, ADGM DPR, Uzbekistan Law, Chile Law)]

We may share your personal data with trusted third-party service providers who assist us in the recruitment process, including:

• Video interviewing platforms used to facilitate pre-recorded responses (Hireflix and/or similar services);
• Google, which hosts our email communication (Gmail) and live interview tools (Google Meet);
• Our HR platform used to manage candidate data securely (HiBob, Greenhouse and/or similar services);
• Our corporate messaging platform used for internal communication related to your recruitment process (Slack and/or similar services);
• Background check and security service providers (where applicable and locally compliant).

We ensure all such providers are contractually bound to comply with applicable data protection laws and process your data only on our instructions.

Because Group-IB operates globally, your data may be transferred across international borders between group entities or third-party platforms. If we transfer your data internationally, we will ensure adequate protections are in place in accordance with applicable data protection laws. This may include legally recognized cross-border transfer mechanisms, Standard Contractual Clauses (SCCs), binding corporate rules, or supplementary administrative safeguards where required by local authorities. Details of these safeguards are available upon request.

If your application is unsuccessful, our retention of your data depends on the purpose:

• Recruitment Analytics, Security & Legal Defense (Legitimate Interest): We retain data collected about you during the recruitment process for a period of six (6) months following our final decision, unless applicable local data protection legislation requires a shorter retention period. This processing is strictly necessary based on our legitimate interest to optimize our security practices, evaluate recruitment performance, and defend against potential legal claims. After the expiration of this applicable retention window, your data will be securely deleted or anonymized unless you provide consent for future opportunities.
• Future Opportunities (Talent Pool): If you choose to join our talent pool, we will retain your full application profile (including your CV and interview notes) for a period of 24 months so we can contact you about future roles. We will proactively request this consent from you before the applicable legitimate interest retention period expires. You can withdraw this consent at any time by emailing [email protected].

Depending on your specific jurisdiction and the applicable local data protection laws, you may have the following rights regarding your personal profile:

• Right to access: You can request a copy of the personal data we hold about you (subject to local exceptions, such as the Evaluative Purpose exception under the Singapore PDPA regarding confidential references).
• Right to rectification: You can ask us to correct inaccurate or incomplete data.
• Right to erasure / deletion: You can request deletion of your data when it’s no longer needed or if you withdraw consent.
• Right to restriction of processing: You can request that we limit how we use your data while we resolve a complaint or verify its accuracy.
• Right to data portability: You can request your data in a structured format to transfer it to another controller.
• Right to object: You can object to processing based on legitimate interests, and we must stop unless we can demonstrate compelling grounds overriding your rights.
• Right to withdraw consent: If processing is based on consent, you may withdraw it at any time.
• Right to lodge a complaint: You can file a complaint with your local data protection or privacy authority.

To exercise any of your rights, please contact us at [email protected].

We implement appropriate technical and organizational measures to protect your data, including, without limitation:

• Role-based access controls;
• Secure storage and encryption;
• Secure communication channels;
• Regular audits and monitoring.

We do not use any automated decision-making, including profiling, during the recruitment process.

We may update this notice to reflect changes in global legal or operational requirements. The latest version will always be provided upon request.